The ZD with application level statistics can give you a rough breakdown by hostname and port, but if you want more detailed information, that would be a job for a different appliance (e.g. a transparent intercepting proxy)